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ABSTRACT 


We  consider  the  usual  n component  monotone  system  in  which  each 
component  is  either  "on"  or  "off"  at  any  time.  That  is,  letting 


'.-i: 


if  component  i is  on 


otherwise 


and  x = (x  , . . . , x ) , we  suppose  that  there  is  a nondecreasing  function 
— 1 n 


<1>  such  that 


<S>  ’ io 


1 if  the  system  is  on  under  state  vector  x 


otherwise . 


The  function  <f>  is  called  the  structure  function. 

Consider  now  an  arbitrary  such  system  and  suppose  that  the  iC^ 
component  is  initially  on  and  stay  on  for  a random  time  T^  of  which 
point  it  goes  off  and  remains  off  forever.  The  random  times  T^  , 
i = 1,  ...»  n will  be  assumed  to  be  independent  and  identically  dis- 
tributed continuous  random  variables.  We  are  interested  in  studying  the 
properties  of  N , the  number  of  components  that  are  off  at  the  moment 
the  system  goes  off.  In  Section  1 we  compute  the  factorial  moments  of 
N in  terms  of  the  reliability  function.  In  Section  2 we  prove  that 
N is  an  increasing  failure  rate  average  random  variable  and  we  also 
present  a duality  result.  In  Section  3 we  consider  the  special  structure 
in  which  the  minimal  cut  sets  do  not  overlap  and  we  prove  a conjecture 
of  El-Neweihi,  Proschan  and  Sethuraman  which  states  that  N is  an  / 4%. 

increasing  failure  rate  random  variable.  In  the  final  section  we  / '*%.  $ /'> 

A.  '0\, 

consider  the  special  case  of  nonoverlapping  min  path  sets.  / 
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ON  THE  NUMBER  OF  COMPONENT  FAILURES  IN  SYSTEMS 
WHOSE  COMPONENT  LIVES  ARE  EXCHANGEABLE 

by 

S.  M.  Ross,  Mehrdad  Shahshahani  and  Gideon  Weiss 

0.  INTRODUCTION  AND  SUMMARY 

We  consider  the  usual  n component  monotone  system  in  which  each 
component  is  either  "on"  or  "off"  at  any  time.  That  is,  letting 

!1  if  component  i is  on 
0 otherwise 

and  x = (xn , . . . , x ) , we  suppose  that  there  is  a nondecreasing  function 
— 1 n 

<t>  such  that 

!1  if  the  system  is  on  under  state  vector  x 
0 otherwise. 

The  function  d>  is  called  the  structure  function.  If  , i = 1,  ...»  n 
are  assumed  to  be  independent  binary  random  variables  with  P{X^  = 1}  = 
p * 1 - P{X^  = 0}  then  we  define  the  reliability  function  r(]>)  by 

r(£)  = PU(X>  = 1>  = E[<KX)]  . 

Consider  now  an  arbitrary  such  system  and  suppose  that  the  iC^ 
component  is  initially  on  and  stay  on  for  a random  time  T^  of  which 
point  it  goes  off  and  remains  off  forever.  The  random  times  T^  , 
i = 1,  ...,  n will  be  assumed  to  be  independent  and  identically  dis- 
tributed continuous  random  variables  (though  as  can  easily  be  seen  all 
of  our  results  will  only  depend  on  the  fact  that  their  joint  distribution 
is  exchangeable) . 


We  are  interested  in  studying  the  properties  of  N , the  number 
of  components  that  are  off  at  the  moment  the  system  goes  off.  (That  is, 
N is  the  number  of  component  failures  necessary  to  cause  system  failure 


2 


under  the  assumption  that  every  time  a component  failure  occurs  the 
failed  component  is  equally  likely  to  be  any  of  the  components  that  were 
up  at  that  time.)  In  Section  1 we  compute  the  factorial  moments  of  N 
in  terms  of  the  reliability  function.  In  Section  2 we  prove  that  N is  an 
increasing  failure  rate  average  random  variable  and  we  also  present  a duality 
result.  In  Section  3 we  consider  the  special  structure  in  which  the 
minimal  cut  sets  do  not  overlap  and  we  prove  a conjecture  of  El-Neweihi, 
Proschan  and  Sethuraman  [2]  which  states  that  N is  an  increasing  failure 
rate  random  variable.  In  the  final  section  we  consider  the  special  case 
of  nonoverlapping  min  path  sets.  In  this  section  we  make  extensive  use 
of  the  duality  principle  to  extend  many  of  the  earlier  results  both  of  this 
paper  and  of  [2]. 
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1.  FACTORIAL  MOMENTS  OF  N 

Let  F denote  the  distribution  of  component  "on"  time  and  let 
F ■ 1 - F . If  we  let  T denote  the  time  at  which  the  system  goes 
off  then 


T = T 


(N) 


where  T(1)  < T(2) 


< T,  . are  the  order  statistics  of  T, , ....  T 
— (n)  1 n 


Now  let  Y^,  . . . , Y^  denote  k independent  (of  each  other  and  also  of 

the  T, ) random  variables  each  having  distribution  F , and  consider 

) 

We  have 


p yj  < t<«!  ■ L pw 


< T(i)  | N - i}P{N  = i} 


(1) 


l P{max  Yj  < T(i)}P{N  « i} 


i=l 


where  the  last  equality  follows  from  the  fact  that  knowing  that  N * i 

gives  us  information  about  the  identity  of  the  components  which  fail 

but  by  the  symmetry  (exchangeable)  assumption  this  yields  no  information 

about  the  times  at  which  these  failures  occurred.  Now,  P | max  Y < T.. J 

(l<j<k  2 U;j 

is  just  the  probability  that  a given  set  of  k elements  in  a set  of 
n + k elements  are  all  chosen  within  the  first  k + i - 1 selections 
in  a nonreplacement  random  selection  scheme.  Thus 


4 


P J max  Y 
(l<j£k  J 


< T 


(i) 


/ n ) 

(i  - 1/ 

n! 

(k  + i - 1)1 

/ n + lc  \ 

(n  + k)! 

(i  - D! 

U + i - 1/ 

Substituting  in  (1)  yields 


(2) 


P 


!max  Y 
l<j<k  J 


< T 


(N) 


n! 

(n  + k)  1 


E[N(N  + 1) 


(N  + k - 1)] 


However  we  can  also  obtain 
conditioning  on  max  Y.  as 


an  expression  for 
follows: 


P{max  Yj 


< 


(3) 


P 


{max  Y 
l<j<k  j 


< T 


(N) 


00 

= J r (F ( t ) 
0 

1 

= k J r(p, 
0 


> t}kFk-1(t)dF(t) 


....  F(t))kFk-1(t)dF(t) 


• • • » p) (1  - p)k  ^dp 


where  we  have  used  the  well-known  fact  (see  [1]  or  [3])  that 
P{T  > t}  = r(F(t),  ....  F(t) ) . Equating  (2)  and  (3)  yields 


Theorem  1: 


1 

E[N(N  + 1)  ...  (N  + k - 1)]  - k-*k)!  k J r(p) (1  - p)k_1dp 

0 


P)  • 


by 


where  r(p)  » r(p,p,  . . . , 


Lemma  1: 

IFR  =*>  SSLSF  =*>  I FRA  . 

Proof : 

We  show  first  that: 


k 

P(X  > k)  = it  (1  - X ) . 

j-1  J 


To  see  that  we  note  that  P(X  > 1)  * 1 - P(X  - 1)  * 1 - X^  , and  proceed 
by  induction  to  write: 


P(X  > k + 1)  - P(X  > k)  - P(X  = k + 1) 

k+1 

- P(X  > k)  - Xk+1P(X  > k)  - 7T  (1  - X ) . 

j-1  J 


* 
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Now  X is  (a)  IFR,  (b)  SSLSF  or  (c)  IFRA  respectively  iff  (a)  1 - X , 
j k )1/k  L k 

(b)  < it  (1  - X )>  , or  (c)  r-  £ (1  — X ) is  nonincreasing  in  k ; 

(j-l  j ) J-l  j 

equivalently  iff  for  k * 1,2,  ...  , 1-  is  less  than  or  equal  to 

(a)  1 - X,  , (b)  | n (1  - X.)f1/k  , or  (c)  £ £ (1  - X.)  . Hence  the 

(j-l  J ) R j-l  j 

lemma  follows  by  comparison  of  the  smallest  term,  the  geometric  mean, 
and  the  arithmetic  mean.® 


In  addition  to  the  random  variable  N we  shall  look  at  random 
variables  N(CL)  and  N(l^)  , i = 1,  ...,  n , which  will  be  the  number 
of  component  failures  until  system  failure  in  the  n - 1 component 
systems  with  respective  structure  functions  <f>(CL;x)  and  4>(l^;x)+  • 

By  conditioning  on  the  first  component  failure,  or  by  conditioning 
on  whether  component  i fails  among  the  first  k or  not  we  get  for 
i * 1,  ....  n : 


n 

P(N  > k)  = l - P(N(0.)  > k - 1) 


(4) 


j-l 


- P(N(0  ) > k - 1)  + n— — - P (N(l  ) > k)  . 
n 1 n i 


We  use  these  two  different  representations  to  see  that  for  every  k 
there  exists  an  i for  which: 


(5) 


P(N(Oi)  > k)  <_P(N(li)  > k + 1)  . 


In  the  following  proof  we  shall  use  the  inequality  (see  [3],  page  217) 
for  0 <_  a <_  1 , 0^_X<^1  , 0 ^ y <_  x 


<KOi,x)  “ ^(x^,  ....  • ••»  xn) 

^1^  ^ (x^  * • * ■ * *i_^  »1»  * • • • » 


4 


(6) 


aV  + (1  - Aa)ya  >_  (Ax  + (1  - A)y)a  . 

We  shall  also  use  the  fact  that,  for  a ^ 1 ,a>x>0  : 

(7)  (a  - x)1/x  is  decreasing  in  x 

which  is  easily  seen  by  taking  logarithms  and  writing 


T lo8  (a  - x)  = -lQf  3 - l 


m-1 


m=l  ma 


m 


We  now  prove: 

Theorem  2: 

N is  IFRA. 

Proof : 

We  will  show  by  induction  on  n that  N has  the  stronger  property 
of  SSLSF.  For  n = 1 , N = 1 and  N is  IFRA.  We  shall  now  show  that 

1 1 
{P (N  > k + l)}k+1  <_  (P(N  > k)  }k 

while  assuming  that  NCCh)  and  NC^)  are  SSLSF;  we  choose  i here 
to  satisfy  (5). 

We  start  by  using  (4)  to  write: 

P(N  > k)  = £ P(N(0.)  > k - 1)  + p(N(i  ) > k)  . 

n i n i 

By  the  induction  hypothesis  the  above  is 


8 


k-1 


> - P (N (0 . ) > k)  k + — P (N (1 . ) > k + l)k+1 
— n l n l 


k-1  k 

Since  — - — < and  P(N(CL)  > k)  <_  1 the  above  set  of  in- 

equalities can  be  continued  as  follows: 


> - P(N(0.)  > k)k+1  + — ~ -k  P (N(l . ) > k + 1) 
— n l n i 


k 

k+1 


Now,  by  the  inequality  (6)  applied  to  a = 


k + 1 ’ 


x = P(N(1.)  > k + 1)  > P(N(0  ) > k)  = y , 


and 


k+l 

k 


we  have  that  the  above  is 


> 1 


-M 


k+l> 

k 


P(N(0i)  > k)  + 


M 


k+l 

k 


h 

P(N(li)  > k + l)j 


Finally  by  (5)  and  by  the  fact  that  from  (7) 


(" irf  > ■ 


we  see  that  the  above  is 


r 


* 


I 
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k 

> PtNCO^  > k)  + 1 P(N(li)  > k + l)|k+1 

k 

- {P(N  > k + l)}k+1  . ■ 

A cut  set  is  a set  of  components  whose  failure  (of  all  components 
in  the  set)  ensures  system  failure.  If  a cut  set  has  no  proper  subset 
which  is  also  a cut  set  then  it  is  said  to  be  a minimal  cut  set. 

Similarly  a minimal  path  set  is  a minimal  (in  the  same  sense  as  above) 
set  of  components  whose  functioning  ensures  the  system's  functioning. 

Hence  if  we  sample  components  one  at  a time,  without  replacement, 
then  N is  the  number  of  components  that  must  be  sampled  until  the  set 
of  sampled  components  contains  all  the  components  of  at  least  one 
minimal  cut  set,  or,  equivalently,  at  least  one  component  of  each 
minimal  path  set. 

* 

Let  us  denote  by  N the  number  of  components  that  would  have  to 

be  sampled  until  we  have  sampled  all  of  the  components  of  at  least  one 

minimal  path  set.  Now  as  each  of  the  n!  outcomes  of  the  order  in  which 

the  n components  are  sampled  are  assumed  to  be  equally  likely  we  can 

associate  with  any  particular  outcome  - say  (i^,^.  •••»  in)  » the 

outcome  (having  equal  probability  of  occurring)  which  reverses  the  sampling 

order  - that  is  (i  ,i  ,,...,  i- ,i, ) . Now  it  is  easy  to  see  that 
n n-l  ^ l 

(i.,  ....  i ) N - k <~>  (i i.)  -*N*-n-k  + l 

in  n l 

for  if  the  first  k components  i^,  . ..,  i^  contain  a minimal  cut  set 
and  none  of  the  first  j components  i^,  . . . , i ^ • j < k , do,  then  it 
follows  that  components  •••*  *-n  does  not  contain  a minimal  path 


4 
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set  but  Vl An  does  for  all  j < k . 

Hence  by  the  duality  of  outcomes  (i  , ....  i ) and  (i  , i ) 

we  see  that 


P(N  - k}  - P{N*  - n - k + 1}  . 


Since  N is  an  increasing  failure  rate  average  random  variable 
exactly  the  same  result  as  established  this  fact  for  N we  have 


by 

that 


(P(N*  > i})171 


is  nonincreasing  in 


i 


or,  equivalently, 

Corollary  1: 

1/i 


(P{N  < n + 1 - i}) 


is  nonincreasing  in  i . 
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3.  NONOVERLAPPING  MINIMAL  CUT  SETS 

In  this  section  we  suppose  that  the  minimal  cut  sets  have  no  components 
In  common.  (In  reliability  terms  such  a system  would  be  a series  arrangement 
of  nonoverlapping  parallel  structures.)  This  case  has  previously  been 
studied  in  [2]  where  among  other  things,  it  was  conjectured  that  N is 
an  increasing  failure  rate  (IFR)  random  variable.  We  now  prove  this. 


Theorem  3: 

If  the  minimal  cut  sets  do  not  overlap  then  N is  an  IFR  random 
variable  in  the  sense  that 

P{N  = k + 1 | N > k}  is  nondecreasing  in  k . 


Proof : 


Let  the  cut  sets  be  numbered  1,  ...,  r , with  n^,  n 

components  respectively.  Let  be  the  index  of  the  cut  set  in  which 


the  ktk  component  failure  has  occurred 


(k  = 1,2 n 


where 


n = 1 n.  , where  we  assume  that  component  failures  continue  to  happen 

i=l  1 

irrespectively  of  system  failure^ . Let  (k)  be  the  number  of  components 
from  cut  set  j that  have  failed  in  the  first  k component  failures. 

We  prove  that  N is  IFR  by  induction  on  r . For  r ■ 1 , N * n^ 
is  constant  and  hence  IFR.  We  now  assume  the  theorem  for  r - 1 , and 
in  particular  we  assume  that  N'  the  number  of  component  failures  until 
the  system  composed  of  cut  sets  2,  ...,  r with  nj,  ....  nf  fails 
is  IFR. 

We  note  first  that: 


4 


To  show  that  this  is  nondecreasing  it  is  enough  to  show  that  for 
0 < 1 £ - 1 <_  k 


P(x1(k)  - i)P(N'  > k - i) 
P(x1(k)  = n1  - 1)P(N ' > k - n1  + 1) 

is  nonincreasing  in  k . 


4 
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The  assumption  that  N'  is  IFR  implies  that  P(N'  > k- i) /P(N ' > k - + 1) 

is  nonincreasing  in  k . Finally, 


P(xn(k) 


^ - 1) 


» (M(k  - 11) . (°i  - 1) 

C)  ’ (I) 


(n^  -1)!  (k  - n^  + 1) ! (n  - n^  - k + n1  - 1) ! 


i!(nx  - i)! 


(k  - i) ! (n  - n^  - k + i) ! 


and  this  expression  is  easily  seen  to  be  nonincreasing  in  k . I 


Remark : 


The  same  proof,  with  an  obvious  modification,  would  suffice  to  show 
that  N is  IFR  if  system  failure  occurs  the  first  time  that  r^ 
components  from  the  i^  minimal  cut  set  fail,  for  some  i , where 

n^  . (Such  a system  would  be  a series  arrangement  of  nonoverlapping 
r^  of  n^  structures.) 


14 


4.  NONOVERLAPPING  MINIMAL  PATH  SETS 


There  is  no  analogue  to  Theorem  3 in  the  case  where  the  minimal 
path  sets  do  not  overlap  (such  a system  would  be  a parallel  arrangement 
of  nonoverlapping  series  structures).  For  instance  if  n = 10  and 

1 is  a minimal  path  set  and  components  2 10  consist  of  a 

second  minimal  path  set  then 


P{N  = k + 1 | N > k}  =<  2/10 


1 

10  - k 


k = 0 


k =*  1 


2 < k < 9 


and  so  it  is  not  nondecreasing.  However  it  does  follow  that  N (the 
number  sampled  until  a complete  minimal  path  set  is  obtained)  is  increasing 
failure  rate  in  this  case.  Hence  we  have 


Corollary  2: 

* i*i 

If  the  minimal  path  sets  do  not  overlap  then  P{N  = k + 1 | N > k} 
is  nondecreasing  in  k , or,  equivalently, 


P{N  * i ] N < i + 1}  is  nondecreasing  in  i . 


In  the  case  of  nonoverlapping  minimal  path  sets  of  sizes 

n * (n^ nr)  let  us  define  P^Cn)  as  the  probability  that  the 

iC^  minimal  path  set  is  the  first  minimal  path  set  that  is  completely 
sampled.  This  quantity  P^(n)  was  extensively  studied  in  [2]  under 
the  interpretation  that  n^  was  the  size  of  the  i^  nonoverlapping 
minimal  cut  set  (and  so  P^n)  could  be  thought  of  in  [2]  as  the 
probability  that  system  failure  is  "caused"  by  the  i minimal  cut  set). 
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Now  let  us  define  P^Cn)  as  the  probability  that  the  iC^  minimal 

path  set  is  the  last  minimal  path  set  to  have  had  a component  sampled 

* 

before  the  system  failed  (i.e.,  P^(n)  is  the  probability  that  the 

component  whose  failure  causes  system  failure  is  from  the  iC^  minimal 
path  set). 

Again  by  using  the  duality  of  outcomes  (i^,  . ..,  in>  and 

(i  , . . . , i, ) we  immediately  see  that 
n X 

pi(n)  = Pi(n)  . 

(The  reasoning  is  as  follows:  if  all  the  components  of  the  it*1  minimal 

path  set  have  just  been  sampled  then  at  that  moment  the  set  of  remaining 

components  does  not  contain  a component  of  the  i^  minimal  path  set  - 

however  the  set  of  remaining  components  would  have  contained  a component 

of  the  iC^  minimal  path  set  one  selection  earlier.)  Hence  all  the 

* 

properties  for  P (xi)  derived  in  [2]  also  hold  for  P^(n)  • For  instance, 

* 

if  we  hold  n^  fixed  and  think  of  P^n)  as  a function  of  (n^,  ...»  nf) 
then  as  shown  in  Theorem  4.8  of  [2],  this  is  a Schur  concave  function 
of  (n2?  » • • i n^)  . 

Duality  also  yields  additional  results  about  N - namely  writing 
N(n)  as  a function  of  ri  *»  (n^,  ...,  nr)  and  using  the  equivalence 
between  N(n)  and  N (n)  it  follows  from  the  result  about  N (n) 
given  in  Theorem  7.3  of  [2]  that 

P{N(n)  < £}  is  Schur  concave  in  n . 
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